$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: MgrNs1Ot1agO48roH5nTmOz3bksjSghrq7zX2rPFBko= Subject key identifier: 55:EE:EB:03:E0:69:A0:09:F8:6B:B4:14:64:D1:39:93:E5:00:5D:C3 Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0A75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0A6C Signing time: Fri 22 Aug 2025 19:47:16 +0000 Manifest this update: Fri 22 Aug 2025 19:47:16 +0000 Manifest next update: Fri 29 Aug 2025 19:47:16 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: JdeeKJ5qOf9fRul+q0l/kUUfnsoWPJ8XaYlj5N9soqg=) 2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: KPuYYAQ14XpM20WTZh+zfqEqRXqFeAhCtZEHNEUGMw8=) 3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: sDoqH+F903pEZfTL5CZCahrin5P/dPEPc5OIr03Af9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2677 (0xa75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Aug 22 19:47:16 2025 GMT Not After : Aug 29 19:47:16 2025 GMT Subject: CN=68a8c944-6135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f3:cc:86:12:b5:af:6b:11:11:f5:a9:62:f8: dd:41:54:0f:9c:b2:51:58:c7:14:37:75:26:af:63: 4c:d5:77:dc:ac:71:ff:4f:2c:e9:28:0b:e4:f7:06: 73:55:97:6b:66:01:68:83:03:f8:3e:dc:a5:48:7a: 84:a1:42:75:78:3e:7c:ef:f8:a4:0c:75:43:63:46: 8d:7d:80:31:82:30:ed:25:12:cb:65:db:0c:0d:54: 6a:40:ee:bb:ab:ae:cf:b3:7d:8d:05:b3:0b:ae:6a: f7:dc:f2:a6:9c:a4:1b:cc:b1:db:f4:ca:be:74:46: 76:7f:0d:28:5e:7e:cf:7b:4d:1b:83:b4:9e:a8:f9: d4:63:f6:5d:eb:64:4d:86:c9:36:1f:95:05:81:11: 08:ca:c9:e2:66:e4:ba:2f:a7:de:66:39:24:e2:f7: 5a:e7:f6:5f:e3:4a:91:42:eb:5c:bd:63:ef:cc:d8: e5:78:55:82:b4:f1:0b:72:a9:f6:f8:88:00:0a:35: 6c:9e:a5:2c:fb:64:9d:f1:68:be:35:f2:a6:23:49: 6d:44:04:eb:b6:aa:95:e3:05:df:4d:0b:9d:b1:e4: 60:9d:80:20:64:38:98:21:c0:ef:de:4f:62:84:06: 7b:66:88:4c:ee:ab:2a:a4:8b:2b:02:2f:67:ac:0c: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EE:EB:03:E0:69:A0:09:F8:6B:B4:14:64:D1:39:93:E5:00:5D:C3 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:7e:16:e6:70:3d:3e:eb:4c:8d:1b:1f:3f:14:78:15:fd:ca: bd:f6:57:ae:17:15:8d:a0:fd:f4:cc:df:16:9d:f3:03:10:d4: be:3e:f2:ed:4b:45:55:e1:9a:23:17:3a:13:45:ec:85:5c:e0: 15:bd:65:5e:25:9e:8b:13:f7:af:67:48:66:fa:80:75:33:b1: 49:10:3a:67:8a:b6:f8:7b:66:12:55:55:17:cd:2b:eb:8f:41: ff:26:96:24:45:ab:a7:b9:c1:90:5e:61:3b:c9:40:13:8c:57: 29:ea:91:26:94:8c:f0:d4:c4:61:13:a3:d3:12:ee:84:6a:90: 9f:70:bc:d8:b6:56:72:92:65:9f:50:1b:9b:2f:99:94:12:16: b3:e0:fd:5d:d2:04:38:e1:f3:91:3b:78:ba:6a:ac:bd:fb:df: 60:0d:ab:af:a1:88:00:99:9d:f6:a7:73:fa:e3:cf:97:18:d8: af:97:99:cc:d4:0f:47:78:e2:d2:30:71:83:f1:4a:3b:6d:25: 10:a7:1c:55:f2:b3:f9:11:40:52:30:dd:96:3a:0d:ca:7f:94: 22:4a:6d:09:c7:a5:09:4f:b0:47:43:9d:c6:d5:c7:4b:e9:98: 6c:c0:24:85:20:fe:e5:a6:9a:47:61:30:6c:73:78:71:fb:5c: 73:10:c2:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjUwODIyMTk0NzE2WhcNMjUwODI5MTk0NzE2WjAYMRYwFAYD VQQDEw02OGE4Yzk0NC02MTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vPMhhK1r2sREfWpYvjdQVQPnLJRWMcUN3Umr2NM1XfcrHH/TyzpKAvk9wZz VZdrZgFogwP4PtylSHqEoUJ1eD587/ikDHVDY0aNfYAxgjDtJRLLZdsMDVRqQO67 q67Ps32NBbMLrmr33PKmnKQbzLHb9Mq+dEZ2fw0oXn7Pe00bg7SeqPnUY/Zd62RN hsk2H5UFgREIysniZuS6L6feZjkk4vda5/Zf40qRQutcvWPvzNjleFWCtPELcqn2 +IgACjVsnqUs+2Sd8Wi+NfKmI0ltRATrtqqV4wXfTQudseRgnYAgZDiYIcDv3k9i hAZ7ZohM7qsqpIsrAi9nrAxiXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXu6wPg aaAJ+Gu0FGTROZPlAF3DMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpfhbmcD0+60yNGx8/FHgV/cq99leuFxWNoP30zN8WnfMDENS+PvLt S0VV4ZojFzoTReyFXOAVvWVeJZ6LE/evZ0hm+oB1M7FJEDpnirb4e2YSVVUXzSvr j0H/JpYkRaunucGQXmE7yUATjFcp6pEmlIzw1MRhE6PTEu6EapCfcLzYtlZykmWf UBubL5mUEhaz4P1d0gQ44fORO3i6aqy9+99gDauvoYgAmZ32p3P648+XGNivl5nM 1A9HeOLSMHGD8Uo7bSUQpxxV8rP5EUBSMN2WOg3Kf5QiSm0Jx6UJT7BHQ53G1cdL 6ZhswCSFIP7lpppHYTBsc3hx+1xzEMJk -----END CERTIFICATE-----Generated at Sun Aug 24 00:47:05 2025 by rpki-client